close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Fast Track: Initial Installation
- Fast Track to Rack Installation and Power
- Claim, Onboard, and Configure SRX1600
play_arrow Overview
play_arrow Site Planning, Preparation, and Specifications
play_arrow Initial Installation and Configuration
play_arrow Maintaining Components
play_arrow Troubleshooting Hardware
- Troubleshoot the SRX1600
play_arrow Contact Customer Support and Returning the Chassis or Components
- Contacting Customer Support and Returning the Chassis or Components
play_arrow Safety and Compliance Information
- Safety Information
- SRX1600 Agency Approvals

list Table of Contents

English

Configure Junos OS on the SRX1600

date_range 17-Jan-25

arrow_backward

arrow_forward

We ship the SRX1600 with preinstalled Junos OS, which is ready to be configured when you power on the device. You can use the J-Web GUI, Juniper® Security Director on Premise, Juniper® Security Director Cloud, or the CLI to perform the initial configuration.

Configure the SRX1600 Using J-Web

The J-Web interface is a Web-based graphical interface that allows you to operate a firewall without commands.

To access the J-Web interface on a new device that has the factory-default configuration:

Connect the management port (MGMT) on your device to the Ethernet port on the management device (laptop or PC), using an RJ-45 cable.
Manually configure the management device with a compatible IP address in the 192.168.1.0 network (for example, 192.168.1.2). Do not use the 192.168.1.1 IP address for the management device as this IP address is assigned to the fxp0 interface.
Open a browser and enter https://192.168.1.1 in the address bar.
The J-Web Setup page opens. You can choose one of the following setup modes to configure the device:
- Standalone mode—In this mode, you can configure the basic settings such as device credentials, time, management interface, zones and interfaces, and DNS servers and default gateways.
- Cluster (HA) mode—In cluster mode, a pair of devices are connected and configured to operate like a single node, providing device, interface, and service level redundancy.
- Passive (Tap) mode—TAP mode allows you to passively monitor traffic flows across a network. If intrusion prevention system (IPS) is enabled, then the TAP mode inspects the incoming and outgoing traffic to detect the number of threats.
Select the setup mode that you want to use to configure the device and click Start.
The Setup Wizard page appears.
Follow the instructions in Configure SRX Devices Using the J-Web Setup Wizard to configure your device.

Configure the SRX1600 using Juniper Security Director Cloud

Juniper® Security Director Cloud is a cloud-based software as a solution (SaaS) portal that helps you securely migrate your network to a Secure Access Service Edge (SASE) architecture.

Follow the instructions in the Onboard SRX Series Firewalls to Security Director Cloud guide to configure your device.

Access the CLI on the SRX1600

To access the CLI on your device:

Connect the management device to the serial console port as described in Connect the to a Management Console Using an RJ-45 Connector.
Start your asynchronous terminal emulation application (such as Microsoft Windows HyperTerminal) and select the appropriate COM port to use (for example, COM1).
Configure the serial port settings with the following values:
- Baud rate—9600
- Parity—N
- Data bits—8
- Stop bits—1
- Flow control—none
Power on the device. You can start performing initial software configuration on the device after the device is up.

Note:
After you complete the initial configuration, you can connect your device to a network for out-of-band management as described in Connect the to a Network for Out-of-Band Management.

Configure Root Authentication and Management Interface from the CLI

You must perform the initial configuration of the device through the console port.

Gather the following information before configuring the device:

Root authentication
IP address of the management interface
Default route

To configure root authentication and the management interface:

Log in as root. There is no password.
Start the CLI and enter configuration mode.
```
root@% cli
root@>configure
root@#
```
Set the root authentication password. You can enter a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA).
```
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
```
Commit the configuration to activate it on the device.
```
[edit]
root@# commit
```
Configure the IP address and prefix length for the Ethernet management interface on the device.
```
[edit]
root@# set interfaces fxp0 unit 0 family inet address address/prefix-length
```

Configure the default route.

content_copy zoom_out_map
[edit]
root@# set routing-options static route 0.0.0.0/0 next-hop gateway

Enable Web access to launch J-Web.
```
[edit]
root@# set system services web-management http
```
Commit the configuration changes.
```
[edit]
root@# commit
```

Factory-Default Configuration of the SRX1600

Your firewall comes configured with a factory-default configuration. The default configuration includes the following security configuration:

Two security zones are created: trust and untrust.
A security policy is created that permits outbound traffic from the trust zone to the untrust zone.
Source Network Address Translation (NAT) is configured on the trust zone.

If the current active configuration fails, you can use the load factory-default command to revert to the factory-default configuration.

View the SRX1600 Factory-Default Configuration

To view the factory-default configuration of the firewall using the CLI:

Log in as the root user and provide your credentials.
View the list of default configuration files:
```
root@srx1600>file list /etc/config
```
View the required default configuration file.
```
root@srx1600>file show /etc/config/config-file-name
```

arrow_backward PREVIOUS Register Products—Mandatory to Validate SLAs

NEXT arrow_forward Routine Maintenance Procedures for the SRX1600

SRX1600 Firewall Hardware Guide

ON THIS PAGE